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I 

I  ABSTRACT 


In  February  1988  an  API -designed  sensor  module  was  launched  into  orbit  and 
performed  a  number  of  significant  SD1  Delta  181  program  experiments.  Sensor 
module  on-orbit  command  and  control  operations  involved  a  network  of  world¬ 
wide  facilities  called  the  control  complex.  A  major  component  was  the  sensor  module 
command  center,  which  was  designed,  installed,  and  operated  by  APL. 

This  document  presents  an  overview  of  command  center  system  design.  Particu¬ 
lar  emphasis  is  gi ten  to  the  hardware  design  and  interface  to  worldwide  assets.  Per¬ 
tinent  detail  of  the  Delta  181  control  complex  and  command  center  mission 
operations  is  given  to  place  the  design  in  osera!1  context. 

The  command  center  design  is  described  within  the  context  of  the  Delta  181  mis¬ 
sion.  After  completion  of  the  Delta  181  mission,  a  modified  version  of  the  com¬ 
mand  center  was  used  to  successfullv  support  the  Delta  Star  mission  in  March  1989. 
Mission  control  center  and  network  design  concepts  developed  for  these  programs 
is  being  carried  over  to  ongoing  development  of  similar  applications. 
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1.  OYKKYIKW 


1.1  SI  MM  \R\ 


!n  fehruaiy  ll)SS  an  AIM  -designed  sensor  module  was  launched  into  othn  by 
a  Delta  rocket  to  perform  ;i  munher  of  strategic  defense  initiative  (SDI)  piogram 
experiments.  I  lie  principal  objective  was  the  formation  ol  a  useful  database  for 
future  SDI  planning.  After  launch,  sensor  module  command,  control  mid  moni¬ 
tor  operations  were  performed  from  a  facility  called  the  sensor  module  command 
center.  The  command  center,  installed  at  Cape  Canaveral  Air  force  Station,  l  la., 
was  designed  and  operated  by  AIM  .  I  Ins  paper  presents  an  overv  iew  of  the  com 
maud  center  design  and  mission  configuration. 

The  command  center  installation  consisted  of  an  operations  toom  and  an  cquip- 
ment  room.  The  operations  room  was  staffed  by  the  sensor  module  mission  oper¬ 
ations  team  and  contained  the  control  terminals,  data  displays,  and  voice 
communication  gear  to  conduct  sensor  module  command  and  monitor  operations. 
The  equipment  room,  located  on  a  separate  floor  in  the  same  building,  housed 
command  center  computer  and  interlace  hardware. 

Post-launch  mission  operations  involved  a  network  of  worldwide  facilities  called 
the  control  complex.  I  he  command  center  was  an  integral  component  of  the  con¬ 
trol  complex  and  interlaced  to  it  as  shown  in  i  ig.  I  I.  It  should  be  noted  that  fig. 
1-1  shows  only  thus*,  control  complex  assets  that  were  involved  with  command  center 
interface  or  operations.  The  entire  control  complex  was  far  more  complicated. 

As  shown  in  fig.  I-J,  real-time  commands  sent  from  the  command  center  and 
telemetry  data  returned  to  the  command  center  were  communicated  through  con¬ 
trol  complex  assets,  f  rom  a  mission  perspective,  operation  of  the  command  center 
was  tightly  coupled  to  control  complex  operation.  Therefore,  before  we  proceed 
with  a  detailed  description  of  command  center  design,  details  relating  to  the  con¬ 
trol  complex  and  the  mission  are  given  below,  to  place  the  command  center  design 
in  overall  context,  f  or  additional  background,  an  overview  of  sensor  module  com¬ 
mand  and  teleme'ry  link'  is  presented  in  appendix  A. 


1.2  MISSION  INSCRIPTION 

1.2.1  experiment  Data  C  ollection 

The  scnxo,  module  was  boosted  into  a  23  -inclination  orbit  by  Delta  IS!,  launched 
from  Cape  Canaveral,  flic  on-orbit  spacecraft  assembly  included  (in  addition  to 
the  sensor  module)  the  Delta  second  stage  (Delta  2).  which  provided  attitude  con¬ 
trol  and  orbit  adjustment  during  the  mission,  i  he  sensor  module  pax  load  included 
a  canister  that  housed  reference  and  experimental  test  objects.  After  orbit  inser¬ 
tion,  the  test  objects  were  deployed  in  a  controlled  sequence.  Instruments  on  hoard 
the  sensor  module  (passive  infrared  and  uhraviolei  sensors,  laser  radars,  and  a  mi¬ 
crowave  radar)  observed  and  tracked  the  test  objects  ovei  a  range  of  enviioumcn- 
tal  backgtound  conditions. 

During  the  first  ten  orbits,  all  experiments  were  conducted  and  sensor  module 
instrument  science  data  was  stored  on  on-board  recorders.  Also  preparations  were 
made  for  downlinki.ie  recorded  data.  During  this  phase  of  the  mission  (called  the 
data  collection  phase)  the  command  ccnici  was  very  active  in  supporting  real  time 
command  operations  and  monitoring  sensor  module  perlonnanee. 
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Fig.  1-1  Sensor  module  command  center  interface. 


1.2.2  Data  Relrieval 

At  the  end  of  the  data-eollection  phase,  in  accordance  with  the  mission  plan, 
the  command  center  loaded  the  sensor  module  with  instructions  to  begin  what  was 
called  the  data-retrieval  phase.  During  that  phase,  the  sensor  instruments  were  off; 
the  task  of  the  control  complex  was  to  retrieve  the  instrument  science  data  previ¬ 
ously  stored  on  board  the  sensor  module.  The  data-retrieval  phase  consisted  of 
ground  operations  to  control  playback  of  stored  sensor-module  instrument  data 
and  record  those  data  at  ground  tracking  sites. 

As  called  for  by  the  mission  plan,  sensor  module  command  and  control  opera¬ 
tions  were  shifted  to  the  Air  Force  Consolidated  Space  Test  Center  in  Sunnyvale. 
Cal.,  for  the  data-retrieval  phase.  During  this  phase,  the  command  center  at  Cape 
Canaveral  was  on  standby  for  contingency  command  operations,  and  operators 
continued  to  monitor  and  evaluate  sensor  module  health.  This  period,  approxi¬ 
mately  one  week  in  duration,  ended  when  two  complete  dumps  of  sensor  module 
instrument  science  data  were  recorded  ar  control  complex  spacecraft  tracking  sites. 


1.3  POST-LAUNCH  OPKRATIONS  CONTROL  COMPI.KX 
1.3.1  Command  and  Telemetry  Sites 

The  control  complex  consisted  of  a  combination  of  worldwide  assets  of  the  Last- 
ern  Test  Range,  the  Kennedy  Space  Center,  the  L.S.  Air  Force,  and  the  U.S.  Army . 
Four  spacecraft  tracking  sites  weu-  used  foi  command  uplink  and  1?  sites  were 
used  to  recover  telemetry.  The  sites,  all  reasonably  close  to  the  equator,  provided 
optimum  ground  coverage  for  support  of  command  uplink  and  telemetry  down¬ 
link  operations.  The  four  command  uplink  sites,  located  at  Guam  (GTS),  Hawaii 
(HWS).  Vandenburg  (VIS),  and  (lie  Indian  ( )eean  ( IDS),  are  part  of  (he  Ait  Force 
Satellite  Control  Network  (Al-SCN). 
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1.3.2  Narrowband  and  Wideband  Data  Finks 

Sensor  module  narrowband  and  wideband  daia  link *-  are  described  in  Appendix 
A.  The  narrowband  data  link  carried  data  required  b>  the  command  center  to  serifs 
commands  and  to  monitor  sensor  module  configuration  and  health.  W  hen  the  sensoi 
module  ssas  in  view  01  a  tracking  site.  n«. . oss band  telemetry  ■■■■.is  . -.vci' cd  and 
relayed  to  the  command  center  in  real  time.  The  III  4  facility,  located  at  C  ape 
Canaveral,  collected,  and  distributed  sensor  module  telemetrs  to  the  command 
center. 

Hie  telemetry  sites  also  recorded  select  svideband  science  data  during  the  data 
collection  phase.  I  he  svideband  dam  consisted  of  real-time  science  data  from  t he 
sensor  instruments.  These  data  ssere  recorded  at  ground  tracking  sites,  when  they 
were  in  view  of  the  sensor  module,  and  were  processed  follow  ing  the  mission.  Note 
that  wideband  dam  were  not  required  by  the  command  center  to  perform  mission 
operations  and  thus  were  not  input  to  it. 

1.3.3  AFSCN  Network 

As  illustrated  in  f  ig.  1-1.  all  commands  sent  from  the  command  center  were 
sent  to  the  sertsor  module  through  the  AFSCN.  During  supported  passes,  when 
an  uplink  tracking  site  was  in  view  of  the  sensor  module,  the  command  center  sent 
commands  in  real  time  to  the  Liastern  1  nvironmenml  Checkout  Facility  (an  AFSCN 
asset),  located  near  the  command  center  at  Cape  Canaveral.  From  that  facility, 
sensor  module  commands  were  sent,  via  the  AFSCN  network,  to  the  tracking  die. 
From  the  tracking  site  the  commands  were  uplinked  to  the  sensor  module.  I  he 
time  required  for  a  command  to  tiavel  bom  the  command  ccntei  to  the  sensor 
module  w as  lew  than  2  seconds. 

Note  that  all  commands  sent  from  Cape  Canaveral  were  routed  through  the 
AFSCN  Consolidated  Space  lest  Center  (CSFC)  located  in  Sunnyvale.  Cal.  I  he 
CSTC  facility  transmitted  the  commands  u >  die  tracking  site  il'.ai  was  curiently 
in  view  of  the  sensor  module.  Before  each  supported  pass.  CSFC  established  com¬ 
mand  and  telemetry  links  with  that  site.  During  the  pass,  commands  sent  from 
Cape  Canaveral  were  then  automatically  routed  to  that  site.  The  CS  I  C  faCity  also 
collected  narrowband  telemetry  from  the  AFSCN  tracking  site  and  sent  it  back 
t»'  ■  •'■'Tirol  comolev  'V'lities  at  Cane  C  anaveral. 

1.3.4  Other  Command  Center  Facilities 

Up  to  litis  point,  we  have  described  how  the  worldwide  spacecraft  tracking  sites, 
the  I  FT  -4  Facility,  and  the  AFSCN  together  supported  command  and  telemetry 
links  to  the  command  center.  We  shall  now  give  a  very  brief  outline  ol  how  the 
remaining  Cape  Canaveral  facilities  supported  command  center  operation, 

1.3.4. 1  Mission  Director  Center.  A  facility  called  the  Mission  Ditceioi  cen¬ 
ter  served  as  the  mission  control  center  for  the  data-collection  phase  of  the  mis¬ 
sion.  Mission  managers  and  technical  advisors  stationed  there  assessed  all  aspects 
of  mission  operation.  Through  the  operations  director,  top-level  instructions  were 
issued  to  the  command  center  and  to  other  control  complex  facilities  to  coordinate 
all  ground-based  operations. 

Flic  Mission  Director  Center  staff  included  AIM  technical  advisors.  I  o  suppoit 
those  advisors,  command  center  computers  interfaced  to  a  number  of  terminals 
located  in  the  Mission  Director  Center  that  displayed  sensor  module  telemetry  data. 

Fhe  command  link  !rom  the  command  center  it'  the  sensor  module  was  unique. 
Flic  command  ccntei  sent  commands  not  only  to  the  sensor  module,  but  also  to 
the  Delta  2  inertial  guidance  computer  and  test  objects  (see  Appendix  \).  In  tins 
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regard,  the  Mission  l)iivv!i'i  (  imih  'Mil  plaved  a  ^iiki.iI  !•  -;c  in  command  . . :  ’ 

uplink  operations.  I  lies  .uillu'r iced  .ill  uplink  operation'  and  'aoimIcJ 
flicts  in  command  icquiiemen's  lluoncli  :1k  o pvt  .mote  diicvro:.  rhv  .0:1  - *1 1 

center  v  instructed  periodicals  on  .  ommand  uplink  tcv, mien. cut' 

1. 3.4.2  Central  Computer  Complex.  !  he  "envoi  module  Rl  ipl  3  a..-  oed 

to  send  commands  to  the  Della  2  inertial  guidance  compute!  In  'tic  .0:  0.  1  ont 
plex.  Delta  2  commands  were  commuted  m  .1  v.i'led  the  (  er.’t.d  1  ompirv 

Complex,  but  wete  'em  lto:n  the  command  centc: .  I  o  accompli-!.  h>  the  *ot:> 
tnand  center  supported  a  Delta  2  umtnitimi  iink  non.  ;Ik  (  ct;;:a:  t  umpmv  < 
plev  I'hc  command  centei  tecei’.ed  the  .okiliinitcd  command' m  1  eal  "me,  compile.! 
the  commands  into  the  cot  tec’  uplink  tonii.it.  and  sent  them  v  'lie  settse:  module 
Dniine  the  mission  a  num lv:  ol  ok1.  commands  wete  -cm  t:om  ’lie  .ommanJ 
ccnivT. 

I  he  natutc  ot  the  Delta  2  commands  (Delta  2  and  t e - ’  ";’kv  me-  K.r  , 
update')  returned  precise  and  timclx  knowledge  o*  the  .i.tual  Del'  1  2  alio  'Cii'o- 
module  otbit,  as  measured  h>  tada:  ftackme.  ! !..  (  en't.il  (  > 't  1  jpuii% •  1  ompl.-s  w.t' 
a  natural  selection  as  die  laciluv  >0  pcrloni:  this  task,  ome  noori.i!  lancttot. 
at  Cape  Canaveral  is  to  (cccivc  and  process  rad.q  ttacD*!,.  data  I  !  r  t.Kii.tv  w.o 
ulreadx  configured  to  iccc'ac  ratlai  dam  on  otbnne  spuscctat:  tiom  a  wmlclwj 
network  ot  radar  site',  l-ot  tiro  ni:s»u»n.  the  <  ent:a!  (  omp:;t  ••  (  omplex  w.o  up 
jtraded  to  configure  Delta  2  inert iai  vutduKc  eompu’er  command'  atu!  suppo>* 
the  command  link  to  the  command  centct 

1.3. 4. 3  Command  (  enter  Sandia  l  ink.  I  lie  ciunmand  ctnici  aho  pow ided 

decrypt eil  narrowband  ’clemetrx  data  and  um  ohicct  di'pl.r.'  -o  die  s.umia  Na 
tiona!  1  aboratorv  ground  support  taciiip  .  \  team  .11  this  I.kiIuv.  m  eoiivctt  w ;th 
technical  adv  i'ors  tit  the  Mission  Diteciot  (  entei.  evaluated  overall  perlonnaiue 
ot  the  test  objects  built  In  the  Sandia  National  I  ahotalorv.  \t  kev  limes  'lu’ine 
the  mission,  decisions  were  required  a'  to  the  ncecssitv  ol  sensitive  ic't  obK\t  com¬ 
mand  uplink  operations  Such  decisions  were  based  pardv  on  telemetr.  and  di' 
plays  prov ivied  b\  the  command  center. 

2  SKNSOR  MODI  I  I  COMM  AND  (IN  H  R  INSI  Al  l  A  I  ION 

I  he  command  centei  operations  toon)  and  1  lie  equipmem  100m  . .  i.'ca'.sl 

in  Hangut  AO  ol  Cape  (  anaveral  Air  I  oree  Station.  I  hev  wee  installed  on  cp.i 
rate  floors,  with  the  opeiations  room  located  abo\e  the  equipment  :00m.  Mission 
operation'  requi'iM  stai'--.'  o!  both  areas,  and  \oiee  links  were  requited  to  vooi 
Jin, tie  internal  command  centei  operuion. 

!  lie  bli'ck  diagram  ot  I  ig.  2  1  shows  a  moie  vletatled  luncttv'u.d  hicakdown  ol 
the  command  center.  Detailed  inlet  connection  between  m.not  command  cente  sub 
s> stems  and  the  control  complex  is  also  show n.  I  !v  equipment  100m  housed  com- 
m.ind  centet  uplink  and  dou ulmk  siibsv stent  ei/iupmeni'.  n Inch  mciitdcJ  ,  1  'inpniei 
and  all  electric1!  interlaces  to  comiol  complex  facilities.  I  he  compute'  supported 
terminals  and  printers  located  m  dv  operations  room  Ilie'C  tettmn.'ds  piovidcd 
the  operator  inlet  face  for  sending  uplink  eommands  and  momtoimg  seiisoi  nu>d 
tile  health  and  status.  I he  downlink  siibswom.  linked  to  the  III)  taciiitv.  pio- 
cessed  narrowband  lelemeirx  anil  pun  ided  all  capabilities  U'  mouroi  (be  scmoi 
module  1  he  uplink  subsWcm.  linked  to  'he  \  1  St  N  net  voi  k  and  the  (  eniial  C  v'ui 
pm er  Complex,  ptov  ivied  the  eapahiluv  to  petlotm  sensoi  movlnlv  eomm.uul  ami 
conttol. 
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2.1  (  (AIM  Y\l)  (IS  I  IK  OIM  KMIONS  ROOM 

I  Ik-  opoi  .1!  uni's  k  i)  'in  iik  Inded  i  m  .uUiih'ii  ;p  i  !k‘  '.oimiii.il'  and  pi  ink'! '  .1:  w  on 
I".  I  ho  opium. iiui  :on:oi  oompiA  i ')  si. 11. 1  lii'pl.ti  nu'iiiii'i',  iHio.'  oiiiiiiiu;i:n!::'"i' 
uni!',  aiul  oloek  display  piowded  t'\  'Ik  f  .I'lom  I  om  Ranee.  1  hi-,  oo.n  .  o'P-v'al!\ 
l  lie  wnee  eomnumioaiions  equipment .  was  vita!  in  '.ha!  it  pioo  ided  iho  ms  s-aio 
Iml"  lor  ooi'klm.iimo  o'limi.iikl  ooniei  operation'  with  opeiatioii  ol  iho  ..oiitiol 
oomplev 

2.1.1  Or^ani/alion 

I  ipuio  2  2  illii'ii.iiO'  :ho  eeneial  l;i> « mi  aikl  'i.itliiip  >>1  iho  oommand  oonioi  i'poi 
atioiis  KKini  I  'okiMi\  lo.i'iiii'.  no  photographs  pi  iho  installation  weie  allowed 
1  ho  opoi  a:  ii'iK  i  ooni  was  01  oa:  a/od  at  omul  two  .  otisolo  :  ow  s  in  w  huh  oon!  1  ><l  aiul 
ili'l'i  i\  oi 1 1 1 1  pi lioai  1 '  uoio  iii'MlIoJ  I  iu  st.iii  positions  uoto  implonioiitoJ  <  11  o.k!i 
10"  !  .ish  position  was  dedteate-d  10  a  spooilu  suit  Ihiiotion.  aiul  ...0  eonliemeol 

with  1  he  appiopiiate  Jispla\  and  eoiino!  ok; i ; ; pi iio'i :: I  .uh  opoiatoi  po'iiion  111 
oliulul  a  ilisplas  oop.solo  aiul  ko'.hoaul.  aikl  .1  \01ee  0on11nuni0.il u'lis  panel  iio.ul 
phono  so;  \  iiiinii'oi  ot  iho  posiions  aiso  inohuloil  I  asioin  I  osi  Ranee  oi.u a  Jisplav 
nii'11  it  01  s.  (  orw  at  ol  ot  'ho  o  on  solo  mu  s.  ( iioonu  leh  Moan  I  m  10.  oounulou  11  nine, 
and  lime  a!  101  In  lot  t  1  I  \  I  <  >)  u  01  e  di'pla.  ed  on  w  all -mounted  units.  I  uo  I  astoi  n 
lest  Ranee  d.r.i  dopi.i.s  w 0 1 .  pmi.vk.!  onto  wall  mounted  'Oioons 

2.1.2  (  1  mi  |m  li-rs 

Iho  .low  1 1 1 1 1 1  k  o'ompuie!  'iippoiloi!  Ii'.o  k-imm:1'  ,i..ii  two  potsonal  eompmets 
in  i  Ik  opoi  at  ion.  1 ...  an  I  lioso  do  a  uv'  w  01 0  posmonoil  to  support  the  son  si 'i  nuul 
ulo  healtli  0- s •  1 1  •  1  a  1  o t  :::.l  ,i  k'.iiti  at  -i-'i.ai  modi ilo  su hs\ skar,  an.ih s(s  ( K I  .111.1 
i > st  loloniotr.  ..nal'.st,  .onun.iiul  and  d.ii.i  !  1 . 1 1 1 . 1 ’ i ■  1  ■  an.ils-1.  and  llioii!  piooossoi 
anal;  sis)  I  hoso  n  1  nmial'  pi  o',  lied  lolomo '  r.  ol.it.i  .ii'pl.is  aikl  print  lut’otioiis  toi 
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Fig.  2-2  Command  center  operations  room 

monitor  of  sensor  module  health  an  J  Mat  us.  The  personal  compute!  '  provided 
specialized  data  analysis  and  graphic  displays  ot  the  flight  processor  data  compo 
nent  of  telemetry  . 

The  command  center  computers  also  supported  three  display  terminals  and.  a 
personal  computer  located  in  the  Mission  Director  Center,  and  a  display  'emimai 
located  in  the  Sandia  National  I  ahoratory  facility .  I  hese  dev  ices  provided  teleme 
try  display  capabilities  identical  to  those  available  within  the  command  center. 

Three  terminals  and  a  personal  computer  in  the  operations  room  were  connect¬ 
ed  to  the  uplink  subsystem  computer.  The  Aid  COM  (API  communications  lan¬ 
guage)  terminal  (at  the  uplink  controller  location),  ua-  the  oniy  terminal  from  which 
sensoi  module  commands.  Delta  2  guidance  computer  commands,  or  test  object 
commands  could  be  sent.  Command  verification  results  were  also  posted  to  this 
terminal.  The  other  terminals  and  personal  computer  supported  the  command  center 
director,  the  alerts  analyst,  and  sensor  module  advisor.  I  hey  were  used  to  monitor 
Central  Computer  (  ompex  interlace  status,  to  generate  updated  station  alett'.  and 
to  run  utility  programs  in  support  of  uplink  planning. 

As  pr.  •  ously  noted,  a  number  of  the  operations  room  staff  positions  included 
Pastern  Test  Range-generated  data  displays.  Those  displays  included  sensor  mod¬ 
ule  orbital  ground  track  .,  selected  Delta  2  telemetry,  prolaunch  countdown  events, 
and  live  television  coverage  of  control  complex  facilities  (launch  pad.  Mission  Direc¬ 
tor  Center,  etc.).  Die  displays  were  useful  to  the  command  center  staff  in  keeping 
abreast  of  control  complex  and  mission  operations. 

2.2  COMMAND  <  I  N  I  I  K  I  QUl’MIM  ROOM 


I  he  equipment  room,  which  housed  the  uplink  anil  downlink  subsystems  hatd- 
ware.  included  the  downlink  and  uplink  MicroVux  II  computer  systems,  an  tin  in 
terrupiiblc  power  system,  and  five  racks  of  interlace  and  test  equipment .  I  lie  layout 
of  that  room  and  the  equipment  is  shown  in  I  tg.  2-x.  Again,  because  ot  secuntx 
considerations,  no  photographs  ot  the  actual  facility  were  allowed. 
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Four  communication  units  v.cic  located  in  the  equipment  rouin.  Dunne  the  mts- 
iion,  the  equipment  room  was  staffed  hy  three  operators,  and  voice  communica¬ 
tion  was  required  for  coordination  with  the  operations  room  as  well  as  with  contiol 
complex  facilities. 
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Fig.  2-3  Command  center  equipment  room. 


The  command  center  also  included  its  own  uninterruptible  power  system  (l  P's). 
This  system  was  required  because  ot  the  power  line  transients  and  outae.es  com¬ 
monly  experienced  at  Caps  Canaveral.  It  powered  all  command  center  equipment, 
including  the  terminals  and  printers  located  in  the  operations  room.  This  system, 
an  Imunelec  series  31,  had  a  15  kY.A  capacity,  and  included  power  conditioning 
and  a  backup  battery  pack.  The  unimcrruptahle  power  system  isolated  it  put  povv 
er  perturbations  from  command  center  equipment  and,  in  the  event  ot  a  complete 
power  outage,  delivered  uninterrupted  power  foi  a  minimum  of  15  inin  ;.cv  i., 
the  event  of  long-term  power  outage,  the  Pastern  Test  Range  maintained  -or  a  stand 
by  basis  during  the  mission  a  backup  diesel  power  generatin'.  I  be  iiniuk'iuptiblc 
power  system  operated  using  either  commercial  AC  power  or  the  ’xi  T  up  ecu  ‘tutor 
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3.  I  PUNK  SUBSYSTEM  DESIGN 


I  igurc  3-1  shows  a  more  detailed  view  ol  the  uplink  luuJwarc.  l-ot  ck  i it \ .  tite 
patch  panel  and  switches  used  to  interconnect  the  \anous  equipment  are  not  shown. 
Some  of  the  more  eommonh  used  test  signal  test  paths  are  indicated  h\  dashed  lines. 

Ihe  core  of  the  uplink  was  the  MieroVax  II  computer  system.  It  included  two 
"50  Mbyte  hard  disks  and  ..  t ape  transport  unit.  I  plittk  soltwate  tesident  i  t  this 
computer  could  generate,  send,  and  verily  commands.  Ihe  command  lotmattei. 
cilery ptor,  and  A1SCN  formatter  equipments  timet ioned  to  interface  uplink  mes¬ 
sages  output  by  the  computer  for  transmittal  to  the  sensor  module.  1  he  echo  pto- 
ccssor.  dccryptor.  AFSCN  depacket i/.er,  and  bit  sync  equipment,  processed  the 
command  echo  returned  from  the  Ai  SC'S,  and  verified  operation  ol  the  entire 
ground  portion  of  the  uplink. 

Uplink  command  and  command  verification  functions  were  implemented  in  both 
hardware  and  software.  A  description  of  key  uplink  functions  follows. 


>•  v  ■ .  i 

»-  U.li.  .1-  ;•••  •  -■  V  .i  »!“ 
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Fig.  3-1  Uplink  subsystem  block  diagram. 


3.1  COMMAND  (.I  N I  RMION 

3.1. 1  \ PI. COM  Operation 

1  igurc  3  2  shows  a  top  level  slat  a  (low  diagram  of  the  uplink  computer  soltwate. 
l  ot  clarity,  onlv  the  basics  ate  shown.  I’lea.e  icier  to  I  ig  3-2  as  required  in  the 
I  allowing  discussion.  I  he  \l’l  COM  soltwate  program,  resilient  in  the  uplink  com¬ 
putet.  provided  the  means  to  send  and  verify  commands  to  the  sensor  module. 
Ihe  program,  operated  via  the  AIM  (  OM  terminal,  was  operator  interactive:  vari¬ 
ous  AIM  COM  language  constructs  allowed  the  operator  to  specie  and  send  com 
mauds  to  the  sensot  module.  Ihe  concepts  behind  AIM  COM  wete  developed  at 
AIM  some  time  ago  lot  'tmil.it  applications  \  unique  vetsion  ol  MMtoMw.is 
designed  lot  sensot  module  command  and  contiol. 
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Fig.  3-2  Uplink  software  data  flow  diagram. 

Command1,  were  entered  by  the  uplink  controller  and  sent  to  the  sensor  module 
in  the  form  of  a  command  message.  Al'tet  entry  of  a  eommand  message  (in  AIM 
COM  language  notation),  AIM  COM  compiled  a  hit  image  of  the  message  and 
passed  it  to  the  uplink  hardware  for  transmittal  to  the  sensor  module.  Ihe  com 
mand  message  bit  image  format  is  shown  in  Appendix  C.  As  shown,  a  eommand 
message  consisted  of  2  to  KX)  commands  imbedded  in  overlaying  protocol.  All  eom¬ 
mand  messages,  including  those  destined  for  the  Delta  2  guidance  computer  or  the 
lest  objects,  were  packed  in  this  formal.  The  commands  could  be  either  real  time 
(i.e.,  executed  immediately  when  received  In  the  sensor  module),  or  delayed  (i.e.. 
stored  in  the  sensor  module  command  store  memory  for  execution  at  a  later  time). 
The  process  of  sending  and  verifying  a  single  eommand  message  typically  took  10 
to  20  seconds,  depending  on  message  length  and  type. 

3.1.2  Runstate  Files 

Closely  associated  with  AIM  COM  operation  was  the  use  of  eommand  runstate 
files.  A  runstate  was  a  text  file  of  AIM  COM  language  commands  specifying  one 
or  more  eommand  message  operations.  AIM  COM  was  designed  to  access  a  run- 
state  file  specified  by  the  operator,  and  tv)  execute  commands  in  that  tile.  A  run- 
state  basically  substituted  for  operator  type-in.  Ihe  use  of  runstate  files  allowed 
for  the  configuration  and  test,  prior  to  launch,  of  eommand  messages  intended 
lor  potential  use  during  the  mission.  It  also  greatly  minimized  the  potential  for 
operator  error,  l  or  this  mission,  about  50  such  i (instates  were  preconfigured, 
thoroughly  tested,  and  placed  in  a  t unstate  data  base  prior  to  launch.  A  number 
ol  these  runstates  were  used  during  the  mission. 
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3.2  COMMAND  \l  I  MIMIC  A  I  ION  AND  \  I  RU  1C  A  I  ION 

In  the  design  of  a  spacecraft  command  facility.  the  commanil  vciitication  pro 
cons  is  always  a  prime  Lonceni  Beum-e  of  t he  nature  ot  Rl  upimks.  there  is  al 
ways  a  small  probability  that  hit  errors  will  occur  in  the  uplink  process  Reception 
by  the  spacecraft  of  hit  errots  in  the  command  message  "ill  generally  pre>  ent  the 
execution  of  one  or  more  ol  the  commands,  t  heretoi e.  lot  reliahle  control  ot  the 
spacecraft,  the  ground  uplink  design  must  include  a  means  to  \ erity  antiitianJ 
edition.  I  or  the  Delta  181  mission,  because  of  (he  extended  g round  network  thiuueh 
which  commands  flowed,  commti'ul  verification  and  authentication  (described  he 
low)  were  especially  critical  functions.  These  functions  were  performed  automati¬ 
cally  by  API  COM  software:  a  brief  overview  is  given  below. 

3.2.1  Authentication  Word 

In  addition  to  command  verification,  the  command  center  maintained  and  veri¬ 
fied  the  command  authentication  word.  (The  sensor  module  command  system  re¬ 
quired  that  each  command  message  include  the  correct  authentication  word:  see 
Appendix  C.)  The  command  authentication  word,  as  well  as  encryption  of  the  tip- 
link,  were  features  designed  to  enhance  security  of  the  command  link.  The  authen¬ 
tication  word  was  a  “key"  that  allowed  the  command  message  to  enter  the  setisot 
module  command  system -the  message  executed  only  if  the  sent  authentication  word 
matched  the  authentication  word  internally  maintained  by  the  sensor  module. 

After  each  command  message  was  sent  to  and  accepted  by  the  sensot  module, 
the  authentication  word  internal  to  the  sensor  module  changed.  API  COM  auto¬ 
matically  computed  a  new  matching  authentication  word.  The  new  authentication 
word,  after  verification  in  API.COM,  was  saved  for  inclusion  in  the  next  com¬ 
mand  message.  Computation  of  the  new  authentication  word  was  based  on  the 
value  of  the  authentication  word  just  sent. 

3.2.2  Authentication  W  ord  Verification 

The  change  in  sensor  module  authentication  word  status  that  occurred  as  each 
command  message  was  accepted  was  immediately  downlinked  in  telemetry.  API 
COM  monitored  change  in  status  and  verified  the  new  authentication  word.  I  he 
new  authentication  word,  computed  h>  API  COM  algorithm,  was  verified  il  it 
matched  the  authentication  vvotd  imputed  from  telemetered  status.  If  the  new 
authentication  word  could  not  be  verified,  API  COM  reset  the  authentication  word 
(to  be  packed  in  the  next  uplink  command  message)  to  its  previous  value,  failure 
to  verity  the  authentication  word  indicated  that  the  previous  command  message 
was  not  accepted  and  executed.  In  this  ease  the  normal  procedure  followed  hv  the 
operator  was  to  simply  resend  the  previous  message. 

3.2.3  Verification  of  C  ommand  f execution 

The  new  authentication  word,  when  verified  by  API.COM.  indicated  that  the 
command  message  was  received  and  command  processing  was  initiated.  To  verily 
command  execution  by  the  sensor  module  command  system.  AP1.(  DM  compared 
replicas  of  the  executed  commands  (w  hieli  were  returned  in  the  narrowband  telem¬ 
etry )  with  commands  sent  in  the  previous  command  message.  In  the  event  the  com 
mand  message  loaded  delayed  commands  into  the  sensot  module  command  store 
memory,  the  command  message  was  authenticated  and  verified  by  MM  COM 
previously  described.  In  addition,  MM  COM  commanded  the  sensor  module  to 
telemetei  the  contents  of  stored  command  memory .  I  he  delayed  commands  stored 
in  memory  were  then  verified  by  comparison  with  an  itnaee  of  the  sent  commands. 
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API  COM  completed  the  command  authentication  and  verification  process  a  lev. 
seconds  following  the  transmission  o I  each  message.  However,  acti\e  teleaietrs  in¬ 
put  wax  required  to  do  this.  In  normal  command  center  opeiation.  commands  wcic 
not  sent  during  a  pass  until  telemetry  input  was  first  detected  lo  this  end.  the 
sensor  module  was  programmed  to  turn  on  the  narrow  hand  tclcmetrv  automati¬ 
cally  when  it  was  o\er  each  telemetry  site. 

3.2.4  Fnd-to-F.nd  Command  \  crification 

The  AP1.COM  command  authentication  and  verification  processes  desciibed 
above  verified  execution  of  all  commands  through  the  sensor  module  command 
system.  They  indicated,  with  high  probability,  that  the  transmitted  commands  were 
executed  by  the  respective  sensor  module  subsystem.  Delta  2  guidance  computet  , 
or  test  object,  l  or  complete  end-to-end  verification,  telemetered  status  data  from 
the  respective  subsystems  were  examined,  l  or  commands  executed  by  sensor  mod¬ 
ule  subsystems,  this  was  performed  by  the  health  evaluator  and  his  team,  located 
in  the  command  center  operations  room.  Monitoring  the  appropriate  telemetry  '|;s- 
play  pages,  they  v  erified  that  subsystem  status  was  reflective  of  commands  packed 
in  the  previous  command  message.  Test  object  commands  were  verified  in  a  simi¬ 
lar  manner  in  the  Sandia  National  1  aboratory  facility.  I  he  Central  Computer  Com¬ 
plex  facility,  which  configured  the  Delta  2  commands  and  accessed  Delta  2  telemetry, 
performed  end-to-end  verification  of  Delta  2  guidance  computer  commands. 


3.3  INTFRFAC  F  TO  HIT.  CFYI  RA1.  COMF1  I  KK  (  OMPFF.X 

3.3.1  Delta  2  Guidance  Computer  Command 

For  reasons  previously  noted.  Delta  2  guidance  computer  commands  could  not 
be  preconfigured  and  stored  in  the  command  runstates  data  base.  These  commands 
were  configured  in  real  time  and  sent  to  the  command  center  from  the  Central 
Computer  Complex.  As  shown  in  Fig.  3-2,  the  uplink  computer  included  software 
to  process  input  from  the  Central  Computer  Complex.  When  Delta  2  guidance  com¬ 
puter  commands  were  received,  they  were  automatically  input  to  API  COM.  API  - 
COM  converted  these  commands  into  a  sensor  module  command  message  and 
output  the  message  for  transmission  to  the  sensor  module.  Operator  interaction 
was  required  to  send  the  message. 

3.3.2  Delta  2  Stale  Vector 

I  he  link  to  the  Central  Computer  Complex  also  carried  other  useful  informa¬ 
tion  to  the  command  center,  which  was  processed  by  uplink  computer  software. 
Most  notable  of  these  data  was  the  Delta  2  state  vector  periodically  computed  by 
the  Central  Computer  Complex.  The  command  center  used  the  Delta  2  state  vec¬ 
tor  to  compute  updated  station  alerts  ( i . e . ,  the  times  at  which  each  telemetry  site 
was  in  view  of  the  orbiting  Delta  2  and  sensor  module).  These  were  generated  by 
an  alerts  program  resident  in  the  uplink  computer.  Alerts  were  required  and  used 
in  overall  operations  planning.  The  latest  alerts,  accessed  by  the  downlink  com¬ 
puter  display  program,  were  placed  on  all  telemetry  data  displays. 

3.3.3  Health  Message 

Because  of  the  nature  of  the  mission,  the  reliablity  and  availably  of  the  inter¬ 
face  link  to  the  Central  Computer  Complex  was  a  prime  concern.  If  the  opportu¬ 
nity  lo  send  Delta  2  guidance  computer  commands  was  lost  due  to  link  failure, 
these  command  operations  generally  could  not  be  "made  up"  at  the  next  available 
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pass.  Thus,  to  enhance  the  reliablit \  of  this  link,  the  C  entral  Computet  Complex 
transmitted  health  messages  at  30-second  intervals.  The  intent  of  the  health  mes¬ 
sage  was  to  allow  the  uplink  computer  to  detect  link  problems  well  before  crucial 
Delta  2  uplink  operations,  so  as  to  allow  sufficient  time  for  corrective  action.  To 
detect  any  link  failure,  uplink  computer  software  continuously  monitored  the  in¬ 
terface  tor  any  loss  in  health  message  activity.  Loss  of  activity  implied  a  link  fail¬ 
ure  and  resulted  in  appropiiaie  operator  notification. 

3.3.4  Interface  and  Message  Form 

Data  transmissions  between  the  Central  Computer  Complex  and  command  cen¬ 
ter  were  carried  over  a  single  RS-232  standard  interface  (%00-baud  rale,  asyn¬ 
chronous  character,  full  duplex).  Each  message  was  sent  in  the  form  of  an  ASCII 
character  text  string  and  involved  a  “handshake”  operation.  The  specification  of 
all  message  types  and  interchange  protocol  is  detailed  in  Ret.  2. 


3.4  COMMAND  UPLINK  HARDWARE  DESIGN  FEATURES 

To  send  a  command  message  to  the  sensor  module,  the  uplink  computer  packed 
the  command  message  into  an  uplink  image  as  described  in  Appendix  C.  Howev¬ 
er,  command  uplink  hardware  was  required  to  transform  the  computer  image  to 
an  electrical  signal  suitable  for  communication  through  the  AFSCN.  In  addition, 
encryption  of  the  command  message  was  performed  in  the  uplink  hardware.  This 
equipment  was  made  up  of  the  command  formatter,  the  encryptor,  and  the  AFSCN 
formatter  (Fig.  3-1). 

3.4.1  Command  Formatter 

To  send  an  uplink  message,  the  computer  passed  an  image  of  the  command  mes¬ 
sage  to  the  command  formatter.  After  receipt  and  error  check,  the  command  for¬ 
matter  propagated  the  message,  in  the  form  of  a  I  kb  s  command  bit  sequence, 
into  the  encryptor.  (Because  of  AFSCN  transport  timing  requirements,  the  accuracy 
of  the  bit  rate,  set  by  the  command  formatter,  had  to  be  better  than  0.02(rn  of 
nominal.)  For  communication  through  the  AFSCN,  the  encrypted  message  was 
packed  into  contiguous  AFSCN  48-bit  frames  by  the  AFSCN  formatter.  See  Ap¬ 
pendix  D  for  a  description  of  the  AFSCN  format  and  additional  AFSCN  interface 
detail. 

3.4.2  Idle  Null  Messages 

The  AFSCN  formatter,  in  addition  to  formatting  the  encry  pted  uplink  message, 
generated  and  transmitted  "idle  null"  messages  between  propagation  of  uplink  mes¬ 
sages.  As  will  be  discussed  in  the  following  section  on  verification  of  the  ground 
uplink,  this  allowed  command  center  operators  to  easily  determine  the  functional 
state  of  the  entire  ground  portion  of  the  uplink  at  any  time. 

The  "idle  null”  messages,  continuously  output  by  the  command  center  between 
command  messages,  also  allowed  AFSCN  equipment  to  maintain  continuous  syn¬ 
chronization  to  the  48-bit  AFSCN  frames  (during  each  pass).  This  allowed  the 
AFSCN  to  be  configured  such  that  no  action  by  AFSCN  operators  was  required 
to  send  or  verify  indiv  idual  command  messages.  The  command  center  output  directly 
controlled  the  RF  uplink  modulation  at  the  active  uplink  station.  As  described  in 
Appendix  D.  “idle  null”  messages  resulted  in  an  RF  carrier  with  no  uplink  com¬ 
mand  modulation.  When  encrypted  command  messages  were  sent,  they  resulted 
in  “I”  and  “0"  tone  modulation  of  the  carrier:  this  modulation  reflected  the  bit 
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sequence  seen  at  the  command  center  encryptor  output,  Total  transport  delay 
through  the  AFSCN  (i.e.,  the  delay  between  a  bit  occurring  at  the  command  cen¬ 
ter  encryptor  output  and  tlte  resulting  modulation  on  the  Kh  uplink)  was  between 
1 .7  and  1 .8  seconds. 

3.4.3  Redundancy 

For  redundancy,  a  dual  set  of  cable  links  carried  the  command  message  from 
the  command  center  to  the  AFSCN  Eastern  Vehicle  Checkout  Facility  at  Cape 
Canaveral.  Both  cable  links  were  active  at  all  times.  Normally  the  AI-SCN  facility 
selected  the  primary  line  for  uplink  through  the  AFSCN.  In  the  event  ot  primary 
cable  link  failure,  it  could  switch  over  to  the  backup  uplink  cable. 


3.5  VERIFICATION  OF  THE  OROIM)  l  PI. INK 

The  uplink  subsystem  included  the  capability  to  verify  functionality  of  the  en¬ 
tire  portion  of  the  ground  uplink,  including  the  AFSCN  assets.  This  was  a  key 
feature  of  command  center  design.  Typically,  during  each  revolution  of  the  in-orbit 
sensor  module,  command  uplinking  was  performed  from  more  than  one  uplink 
site.  The  uplink  thus  was  reestablished  and  verified  a  number  of  times  during  each 
orbital  period.  A  means  to  quickly  determine  the  functional  status  of  the  link  be¬ 
fore  each  pass,  and  take  corrective  action  if  necessary,  was  vital  to  maintaining 
reliability  and  availability  of  the  command  link.  The  following  paragraphs  describe 
the  design  of  the  command  center’s  capability  to  verify  the  entire  ground  uplink. 

3.5.1  Command  F.cho 

In  order  to  perform  verification  of  the  ground  uplink,  the  AFSCN  was  configured 
to  return  to  the  command  center  a  real-time  image  of  AFSCN  command  input. 
This  signal,  called  the  command  echo,  was  derived  during  supported  uplink  passes 
by  detection  of  RF  carrier  modulation  at  the  uplink  site.  The  command  echos  were 
received  in  the  identical  format  as  output  to  the  AFSCN,  i.e.,  packed  in  AFSCN 
48  bit  frames.  The  return  echo  was  continuous  and  included  the  “idle  null''  mes¬ 
sages  inserted  between  command  messages.  The  command  center  included  equip¬ 
ment  (Fig.  3-1)  to  process  the  command  echo,  and  to  verify  func  tonality  of  the 
ground  uplink. 

3.5.2  Echo  Processing 

3.5.2. 1  Level  1.  The  command  center  performed  echo  processing  at  two  differ¬ 
ent  levels.  The  first  level,  referred  to  as  level  1,  involved  only  the  bit  sync  and  AFSCN 
depacketi/er  shown  in  Fig.  3-1.  A  level  1  check  was  a  simple  vet  powerful  test  that 
could  be  performed  at  any  time.  It  required  only  that  the  command  center  be 
powered  and  that  an  echo  loopback  he  connected  at  some  point  in  the  AFSCN. 
When  powered,  the  command  center  continuously  sent  “idle  null”  messages  to 
the  AFSCN,  as  previously  described.  The  command  echo  then  consisted  of  a  stream 
of  “idle  null”  messages.  The  depacketi/er,  which  performed  the  inverse  function 
of  the  AFSCN  formatter,  continuously  monitored  the  return  command  echo  for 
frame  synchronization,  parity  ,  and  message  content.  If  AFSCN  frame  and  parity 
was  continuously  maintained,  this  indicated  (with  a  high  probability)  that  the  link 
was  functional  through  the  loopback  point.  Indicators  on  the  depacketi/er  front 
panel  gave  operators  a  continuous  reading  ot  uplink  status.  I  his  test  was  very  use¬ 
ful,  as  it  enabled  the  uplink  to  be  easily  checked  at  any  time. 
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3. 5. 2. 2  Level  2.  The  command  center  echo  processing  equipment  also  per¬ 
formed  a  level  2  test  that  involved  a  direct  check  of  uplink  command  messages. 
This  involved  the  decryptor  and  echo  processor  equipment  shown  in  Tig.  3-1 .  When 
uplink  messages  were  sent,  the  return  command  echo,  after  depacketi/ation.  was 
decrypted  and  compared  in  the  echo  processor  with  the  transmitted  command  mes¬ 
sage.  The  echo  processor  also  veritied  that  these  command  messages  were  packed 
in  the  correct  sensor  module  format.  Level  2  testing  was  used  to  directly  examine, 
at  the  command  center,  each  uplink  message  radiated  from  the  uplink  sites. 

3.5.3  Echo  Utilization 

The  command  echo,  trom  an  operational  perspective,  was  used  as  follows.  Pri¬ 
or  to  each  pass,  the  AFSCN  reconfigured  to  establish  a  command  link  to  the  ap¬ 
propriate  uplink  site.  Generally,  about  20  minutes  before  the  pass,  the  link  was 
established  and  the  command  echo  was  looped  back  from  that  site.  C  ommand  center 
operators,  employing  both  level  1  and  level  2  checks,  verified  that  the  command 
link  was  ready  to  support  the  pass.  In  the  event  a  problem  was  detected,  command 
echo  processing  then  served  as  a  rapid  ground  fault  isolation  tool.  By  successive!) 
looping  back  from  points  within  the  AFSCN  and  command  ceniei,  the  faulty  fa¬ 
cility  or  equipment  was  readily  determined.  Figure  3-3  shows  typical  loopback  points 
within  the  AFSCN  and  command  center. 

3.5.4  Echo  Monitoring 

During  the  pass,  command  center  operators  continued  to  monitor  the  command 
echo.  It  should  be  stressed,  however,  that  the  RF  uplink  .mrw.is.si. ..  c*'  each  com¬ 
mand  message  was  not  contingent  on  ground  uplink  verification.  Commands  were 
sent  and  verified  by  APLCOM  program  software  as  previously  described.  The  com¬ 
mand  echoes  were  monitored  so  that,  in  the  event  of  failure  to  command,  it  could 
be  quickly  determined  whether  the  fault  was  in  the  ground  uplink  or  the  sensor 
module.  In  general,  for  pre-launch  test  operations  and  post-launch  mission  opera¬ 
tions,  command  center  ground  uplink  test  capabilities  provided  great  insight  into 
AFSCN  performance. 


Eastern  Vehicle  Consolidated  Uoltnk 
ChecKout  Space  Test  s<’e 


RF 


Command  Center 
loopback  points 


AFSCN  loopback  points 


I 

I  Test  loopback  pom: 


Fig.  3-3  Major  loopback  points  for  ground  uplink  test. 
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4.  DOWNLINK  Sl'BSYSTKM  DKSK.N 


The  basic  function  of  the  downlink  subsystem  was  to  enable  the  command  cen¬ 
ter  operating  staff  to  monitor  sensor  module  health  and  performance  during  the 
data-coliection  phase  of  the  mission,  lo  this  end,  the  following  "classic"  teleme¬ 
try  capabilities  (usually  found  to  some  degree  in  any  spacecraft  command  and  con¬ 
trol  center)  were  provided: 

1.  Real-time  (i.e.,  during  a  pass)  formatted  display  and  printout  of  all  sensor 
module  narrowband  telemetry  data. 

2.  Real-time  limits  test  of  selected  sensor  module  narrowband  telemetry  data. 

3.  Log  of  real-time  narrowband  telemetrv  data. 

4.  Access  to  logged  pass  telemetry  data  for  display,  printing,  and  testing. 

A  more  detailed  hardware  breakdown  of  the  command  center  downlink  is  show  n 
in  Fig.  4-1.  A  detailed  description  follows. 


Fig.  4-1  Downlink  subsystem  block  diagram. 

4.  i  DISPLAY  C OMPI  TKR 

The  primary  equipment  for  prov  iding  formatted  display  and  printing  capability 
was  the  downlink  MicroVax  II  computer  (Fig.  4-1).  That  computer  provided  te¬ 
lemetry  display  to  the  command  center  operations  room,  the  Mission  Director  Cen¬ 
ter.  and  the  Sandia  National  Laboratory  facility.  The  computer  also  supported 
printers  located  in  the  operations  room.  A  menu-driven  display  program  installed 
on  the  computer  allowed  the  operator  at  each  terminal  to  select  from  a  list  of  precon¬ 
figured  display  pages.  F.ach  page,  in  addition  to  displaying  up  to  30  telemetered 
parameters,  included  station  alerts  information.  From  each  terminal,  the  operator 
could  select  a  data  page  printout  at  any  time. 
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The  downlink  computer  also  was  connected  to  personal  computers  m  the  com¬ 
mand  center  operations  room  and  in  the  Mission  Director  Center.  These  downlink 
personal  computers  were  used  mainly  to  proside  specialized  tabular  and  graphic 
displays  of  sensor  module  flight  processor  data  following  selected  passes  (e.g.,  a 
“map"  of  test  object  location  and  velocity).  During  each  pass  the  computer  stored 
all  real-time  flight  processor  data  to  a  disk  file;  following  the  pass,  the  stored  flight 
processor  data  could  be  accessed  by  the  personal  computers. 

The  downlink  computer  also  provided  an  output  of  decommutated  telemetry  and 
time  tags  to  the  uplink  MicroVax  computer  over  an  Ethernet  link.  This  telemetry 
was  required  by  the  uplink  computer  to  perform  sensor  module  command  and  mem¬ 
ory  verification.  The  time  tags  were  used  to  set  the  uplink  computer  clock. 


4.2  TELEMETRY  INPIT,  DEC  RYPTION,  AND  DECOM NUTATION 

The  TEL.-4  facility  prov  ided  redundant  real-time  sensor  module  telemetry  in¬ 
put  to  the  downlink  subsystem.  The  redundant  inputs,  each  consisting  of  serial  33-kb 
encrypted  data,  were  concurrently  active  whenever  telemetry  data  were  available. 
The  command  center  downlink  could  be  configured  to  use  either  input. 

4.2.1  Telemetry  Processing 

Figure  4-1  shows  the  downlink  equipment  that  processed  and  interfaced  teleme 
try  data  to  the  downlink  computer.  Telemetry  processing  consisted  of  bit  synchroni¬ 
zation,  decryption,  and  decommutation.  Bit  synchronization,  performed  by  a  DSI 
model  7700,  was  required  to  extract  data  and  clock  information  from  the  TEE-4 
input  signal.  The  bit  synchronized  data  were  decrypted  and  input  to  a  Loral  model 
ADS- 100  decommutator  subsystem.  The  decommutatcr  synchronized  to  the  telem¬ 
etry  frame  and  provided  decommutated  data  to  the  downlink  computer.  The  basic- 
decryption  unit  was  a  KGX-2N  keyed  to  the  sensor  module  telemetry  encryption. 

4.2.2  Other  Decommutalor  Functions 

1  he  decommutator  performed  a  number  of  functions  in  addition  to  decommu¬ 
tation  and  interface  to  the  downlink  computer.  It  prov  ided  additional  formatted 
data  displays  and  printout  capability,  data  limits  check  ng,  and  a  decrypted  data 
log.  A  video  monitor  unit  located  in  the  operations  room  presented  decommutalor 
generated  data  display  pages.  The  decommutator  time-tagged  each  received  telem¬ 
etry  frame,  and  logged  each  telemetry  data  frame  and  respective  time  tag  to  a  digi¬ 
tal  tape  recorder,  l  ogged  data  could  be  played  back  and  processed  in  the  downlink 
computer  in  the  same  manner  as  real-time  daia. 

The  data  limit  feature  of  the  decommutator  allowed  the  operator  to  specif)  high 
and  low  alarm  limits  to  selected  telemetry  data  parameters.  \\  hen  this  test  feature 
was  enabled,  received  data  that  exceeded  the  specified  limits  would  cause  a  visual 
and  audible  alarm  message  to  be  posted.  This  feature  allowed  quick  and  automat¬ 
ed  checks  of  sensor  module  health  and  status  during  selected  passes  during  the 
mission. 

The  command  center  received  1RIG-120-B  time  standard  input  from  the  East¬ 
ern  Test  Range.  This  time  information  was  input  to  the  1  oral  decommutator  sub¬ 
system  to  set  clocks  both  in  the  Loral  Decommutator  and  MicroVax  computers. 

4.2.3  Encryption/ Decryption  Bairs 

Please  note  that,  for  security  reasons,  it  was  required  to  “band"  encryption  hard¬ 
ware  in  its  mounting  racks.  Also,  these  decryption  units  did  not  have  any  status 
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indicators.  I  hus  detection  and  tepair  of  a  tailed  decryptor  unit  would  normally 
be  a  time-consuming  operation.  To  remain  operational  in  the  event  of  a  failure, 
the  downlink  decryption  encryption  chassis  design  included  two  decryption  units 
and  two  encryption  units.  The  second  decryption  unit  provided  a  hot  spare  in  the 
event  the  first  decryptor  failed,  if  it  was  determined  a  decryptor  failed,  the  alter¬ 
nate  deeryptor  could  be  switched  in  by  simply  toggling  a  switch.  The  encryptors 
were  included  for  rapid  test  and  fault  isolation  of  the  decryptors.  Comparison  of 
the  input  and  output  of  an  encryption  decryption  pair,  connected  in  series  lor  test, 
provided  a  quick  and  convenient  means  to  ascertain  decryptor  functionality. 

4.3  DATA  LOG  CAPABILITIES 

In  addition  to  the  digital  tape  recorder  used  to  record  decrypted,  time-tagged 
telemetry,  the  dow  nlink  also  included  a  Honey  well  analog  tape  recorder.  This  record¬ 
er  logged  encrypted  TEL.-4  input.  In  addition,  the  analog  recorder  logged  time, 
encrypted  uplink  command  messages,  and  the  return  command  echo. 

Both  tape  recorders  were  used  for  operations  and  data  lodging  during  the  mis¬ 
sion.  Also,  prior  to  launch,  they  were  heavily  used  for  command  center  test  and 
fault  isolation.  While  the  command  center  was  integrated  and  tested  at  API  .  a 
number  of  tape  recordings  were  made  of  actual  sensor  module  narrow  band  telem¬ 
etry.  After  installation  at  Cape  Canaveral,  and  prior  to  a  number  of  critical  con¬ 
trol  complex  integration  tests,  playback  of  encrypted  telemetry  proved  especially 
useful  for  verifying  command  center  functionality  . 
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APPENDIX  A— 

SKNSOR  MODI  !  K  COMMAND  AND  II  I  IMITKA  1  INKS 


COMMAND  l  IM  INK 

\s  shown  in  I- m.  A- 1 .  the  censor  module  Kl  tipknk  carried  commands  executed 
In  the  senso:  module.  However.  this  link  was  unique  in  thai  u  aim  carried  com¬ 
mands  destined  tor  the  Delta  2  menial  guidance  computer  (built  b>  MaeDonnell 
Douelas)  and  to  lour  tC't  olueets  built  In  the  Nandia  National  I  aborator> .  I  lie 
sensor  module  served  as  a  conduit  lot  inertial  guidance  eomputer  rind  lesi  object 
commands.  Command'  received  In  the  sensor  module  were  interpreted  m  the  com¬ 
mand  svstem  and.  depending  on  tspe.  wetc  either  (I)  e\  ecu  ted  within  the  sensor 
module,  (2)  passed  to  the  Delta  2.  oi  i  'i  transmitted  to.  the  respective  test  ohiect. 

I  he  sensoi  module  uplink  (in  t e t m-  ot  irequenev  selection,  modulation  struc¬ 
ture,  bit  eneodine.  etc.)  was  \(  ,1  s-compatible.  (NCd  S  is  an  Air  borce  abbrevia¬ 
tion  tor  Space  (hound  I  mk  Subsvsicm.)  I  lie  lour  Aii  1  orcc  Satellite  Control 
Net  wot  k  irackme  sues  used  lo;  uplink  were  alieadx  S(  1 1  S-eoiupatible  and  thus 
required  onlv  mmoi  upgrades  to  support  the  mission. 


MacDorreV  Ocjgias  >.  ah  l  sarior  mod,,  a  Sarnia  National  Laboratory 

Dpita  yecor  n  stagy  orbiting  tnst  ebipets 

i Delta  2 


APSCN  jpiink  site 

Fig.  A-1  Uplink  command  flow  for  orbiling  sensor  module.  Delta  2,  and  test  objects. 


I  he  command  structure  as  shown  mmimi/cd  the  ovetall  need  lot  command  s>s 
tern  llieht  hardware  and  mound  uplinks.  Howevei,  this  appioaeli  ciicl  place  addi¬ 
tional  burdens  on  command  centet  ilesien  and  opeiation.  hirst.  the  command  center 
had  ti'  send  comm, mils  10  the  inertial  enidance  computet  and  test  objects  (in  addi¬ 
tion  10  l he  sensoi  module).  In  addition,  the  command  verification  process  'or  these 
additional  commands  was  somewhat  more  complicated  than  verification  of  sensor 
module  commands.  Sensoi  module  commands,  sent  In  die  command  center  and 
executed  In  the  scnsvi  iiK'uuic.  inu  vCOinvl  ,i..ii|,„iu'  vv.,,un  I  he  command  cen¬ 
ter.  Ilnis.  tiom  an  opeiaiion.il  perspeeiive.  this  u,;s  a  rclaiivclv  siimglii forward 
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process.  However,  the  eomnmnd  eentei  could  verity  Delia  2  command'  and  n.si 
object  eommand'  to  only  a  limited  degree.  (  ompleie  end-to-end  veiilieauon  ot 
those  commands  reel  aired  support  from  facilities  and  expertise  outside  die  com¬ 
mand  center.  Operaiionallx ,  sending  and  verifying  llie  execuiion  of  these  a'tmiuiid' 
required  a  very  high  degree  ot  coordinaiion  between  tlie  command  cetttet  tinvl  oth¬ 
er  control  complex  facilities. 

Il  l  KMKim  DOW  M  INK'S 

I  nc  orbiting  sensor  module  and  Delta  2  telemetry  downlink'  are  illustrated  in 
l  ie.  A-2.  1  he  sensor  module  had  three  telemetry  links,  a  narrowband  133  kb  s) 
link  and  two  wideband  (1  Mb  s)  links.  flic  narrowband  link  carried  sensor  mod¬ 
ule  data  required  by  the  command  eentei  to  perform  real-time  command  and  mon¬ 
itor  operations.  It  was  received  In  control  complex  tracking  sites  and  sent  in  teal 
time  to  the  command  center.  Narrowband  telemetry  was  a  composite  ol  sensor 
module  housekeeping  data  (e.g.,  temperatures,  voltage,  and  current  measurements, 
and  sensor  module  instrument  status),  sensor  module  flight  processor  data  and 
Sandia  National  1  aboiatory  test  ohiesi  telemetry.  \  major  component  ol  flight 
processor  dam  was  position  and  velocity  information  maintained  by  the  (light  pio- 
cessor  on  a  number  of  test  objects. 

Die  two  wideband  ielemetry  links  carried  science  data  generated  bv  the  sensor 
instruments.  During  the  data-colleciion  phase  ot  the  mission,  the  wideband  data, 
downlinked  over  select  spaceciaft  tracking  sues,  was  derived  in  teal  time  from  the 
sensor  instruments.  Note,  however,  that  the  bulk  of  science  data  generated  during 
the  data-collection  phase  was  stored  on  tape  recorders  and  retrieved  on  the  ground 
at  a  later  time.  During  the  dam-retrieval  phase  of  the  mission,  wideband  dam  con¬ 
sisted  of  science  data  played  back  from  the  on-board  recorders.  Data  from  these 
links  were  recorded  at  13  tracking  sites  and  processed  following  the  mission.  Wide 
band  data  were  not  required  by  the  eommand  center  for  real-time  command  and 
control  operations. 

The  sensor  module  downlinks  (in  terms  of  frequency  selection,  modulation  struc¬ 
ture,  bit  encoding,  etc.)  were  also  SC  1 1  S-compatible.  All  13  tracking  sues  m  the 
control  complex  were  SC i I  S-downlink  compatible,  and  thus  wetc  capable  ot  iccetv 
ing  and  processing  sensor  module  telemetry. 

The  Delta  2  vehicle  had  three  telemetry  downlinks.  Data  telemetered  in  these 
links  were  received  at  selected  control  complex  tracking  sites  and  sent  m  teal  time 
to  facilities  located  at  Cape  Canaveral  Air  force  Station.  I  hose  link'  were  not  in 
put  tv'  the  command  center;  they  were  processed  by  MacDonncll  Douglas  installa¬ 
tions  outside  the  eommand  center.  Ot  special  note,  however,  was  the  inclusion  ot 
inertial  guidance  computer  data  in  Delta  2  telemetry.  Real  time  inertial  ginduikc 
computer  data,  telemetered  to  the  control  complex,  was  used  to  venly  end  to  end 
Delta  2  inertial  guidance  computer  commands  previously  sen:  Irom  the  command 
center. 
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Della  second  stage 
(Oelta  ?; 


Receved  at  tracKing  sues 
and  sent  to 
Eastern  Test  Range 


AP'_  M  Mi.or  rr I-V}ij«-  S  "ti.Vi  r.  L.jbO'«.«j»* 


waCKing  sites  and  sent  to 

Eastern  Test  Range 


Fig.  A-2  Orbiting  sensor  module,  test  objects,  and  Delta  2  telemetry  links. 


APPENDIX  B— 

TELEMETRY  AM)  UPLINK  STATION  CONTACTS 


Table  B-l  lists  control  complex  telemetry  and  uplink  contacts  with  the  sensor 
module  during  the  data-eollecion  phase.  At  every  available  opportunity,  when  a 
telemetry  site  was  in  view  of  the  sensor  module,  narrowband  telemetry  was  returned 
1  r  the  command  center.  Telemetry  daia  were  displayed  in  order  to  monitor  sensor 
.nodule  health  and  status;  the  deployment  and  tracking  of  test  objects  were  also 
monitored  at  key  points  during  the  mission.  T  he  command  center  experienced  mul¬ 
tiple  contacts  during  each  orbit  of  the  sensor  module;  as  a  result,  command  center 
operations  during  this  phase  were  continuous  and  intense. 

The  command  center,  for  some  orbits,  sent  command  messages  from  a  number 
ot  uplink  sites.  The  Al-SCN  and  command  center  had  to  rapidly  reconfigure  and 
test  the  command  uplink  before  each  of  these  passes.  The  ability  of  the  command 
center  to  rapidly  verify  the  ground  uplink,  as  described  in  tire  main  text  of  this 
report,  played  an  important  role  in  the  overall  success  of  command  operations. 

I  he  uplink  command  messages,  as  a  function  (■:  orbit  and  uplink  site,  are  given 
in  Ref.  5.  Generally,  iw-  -  pcs  of  commands  were  sent.  Delta  2  inertial  guidance 
computer  commands  auu  sensor  module  flight  processor  commands.  As  described 
in  the  main  text,  tire  Delta  2  commands  were  configured  in  the  central  computer 
complex  and  sviit  by  the  command  center.  1  he  sensor  module  lliglu  processor  com¬ 
mands,  configured  and  sent  h>  the  command  center,  enabled  or  disabled  flight  pro- 
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Lessor  functions.  These  commands  were  seni  in  response  to  contingencies  t hat 
occurred  during  the  mission.  Command  runstates  tor  these  contingencies  were  con¬ 
figured  before  launch.  Also  note,  at  the  CITS  (Ciuam)  site  on  the  ninth  orbit,  the 
command  center  uplinked  a  new  load  to  the  sensor  module  commands  store  mem¬ 
ory.  This  load  provided  delayed  command  instructions  to  the  sensor  module  for 
data  retrieval  operations.  Beginning  on  the  tenth  orbit,  the  AISCN  began  retieisa! 
of  data  played  back  from  on-board  recorders. 

Wideband  telemetry  contacts  with  control  complex  sites  is  also  shown.  Note, 
however,  that  this  data  was  not  sent  to  the  command  center;  it  was  logged  on  tape 
at  these  sites  and  processed  following  the  mission. 


Table  B-1 

Delta  181  telemetry  and  uplink  site  sensor  module 
contacts  for  the  data-collection  phase. 


Orbit  Site 


NB  WB  I'plink 


OSAKA 

HAW 

HIS 

VTS 

MILA 

.11)11- 

ANT 

ASC 


x  \ 

\  \ 

\ 

A  \ 

X  \ 

\  \ 

X  \ 

\  X 


3 

3 

3 

3 

3 

3 

3 

3 

3 


GTS  v  x  \ 

OSAKA  x  x 

HAW  \  v 

HIS  x  x 

VTS  x  x  x 

Ml  I.  A  x  \ 

JDIF  x  x 

ANT  x  x 

ASC  x  x 


4 

4 

4 

4 


GTS  xx  x 

HAW  x  x 

HTS  x  x 

VTS  xx  x 


5 

x 


X 

5 


G  IS  x  x  x 

HAW  x  x 

HTS  x  x 

IDS  xx  x 


6 

6 

6 


HAW  x  x 

HTS  x 

IOS  x  x  x 


ss 
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Table  B-1 

Delta  181  telemetry  and  uplink  site  sensor  module 
contacts  for  the  data-col!ection  phase,  (cont'd) 


HAW 

HIS 

7  A  St 

S  G  IS 

8  I  SARA 

8  AST 

9  GTS 

9  US AKA 

9  ASC 


\  \ 

\  \ 

\ 

\  x 

\ 

\ 

\  \ 

\ 

\ 


A1  SUN  begins  data  retrieval 
10  GTS  x  x  \ 


Notes:  NB  -  narrowband  lelemetry  contact 

W’B  =  wideband  telemetry  contact 
Uplink  command  uplink  contact 

Uplink  and  telemetry  sites: 

Air  Force  Satellite  Control  Set  work  (ATSCS) 

IQS  -  Indian  Ocean  Station 

GTS  -  Guam  Tracking  Site 

MTS  -  Hawaii  Tracking  Site 

VTS  -  Vandenburg  Tracking  Site 

Goddard  STDS  Sites 

Mil. A  -  Merritt  Island  l  aunch  Area 

GAVM  -  Guam 

HAW  -  Hawaii 

AGN  -  Ascension  Island 

La  stern  and  lies  tern  Test  Ran  tie  Sites 
.11)11-  -  .lohnathon  Dickerson  Instrumentation 

Facility 

ANT  -  Antigua  Island 

ASC  -  Ascension  Island 

V  I  RS  -  Vandenburg  Tracking  Site 

USAKA  -  LI.S.  Army  Kvvajalein  Atoll 
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APPENDIX  ( 

SENSOR  MODULE  COMMAND  MESSAGE  FORMAT 


Commands  were  packed  and  sent  to  the  sensor  module  in  the  lorm  of  a  com¬ 
mand  message.  Each  message  was  a  hit  sequence  organized  and  formatted  as  shown 
in  Fig.  C-l.  The  bit  sequence  was  encrypted  and  modulated  onto  the  RF  uplink 
carrier  at  1  kb  s.  A  decryptor  on  board  the  sensor  module  recovered  the  plain  test 
message.  The  command  message  format  is  an  artifact  of  the  sensor  module  com¬ 
mand  system;  therefore,  sensor  module.  Delta  2  inertial  guidance  computer,  and 
test  object  commands  were  all  packed  and  encrypted  in  this  same  format. 

As  shown,  each  command  message  included  a  preamble,  an  authentication  word, 
a  sync  word,  a  commands  field,  and  a  postamble.  The  commands  field  was  vari¬ 
able  in  length  and  contained  up  to  KM)  commands.  Each  command  mapped  into 
a  64  bit  sub-field.  The  commands  field  was  always  terminated  with  an  end-of- 
message  command;  thus,  the  shortest  command  message  always  included  at  least 
two  commands.  The  commands  could  be  either  real-time  (i.e..  executed  immedi¬ 
ately  when  received  by  the  sensor  module),  or  delayed  (i.e..  stored  in  the  sensor 
module  commands  store  memory  for  execution  at  a  later  time).  However,  a  partic¬ 
ular  command  message  could  consist  of  only  one  type. 

At  the  appropriate  AFSCN  uplink  site,  the  command  message  was  modulated 
(SGLS  format)  onto  the  RF  uplink  carrier.  The  shortest  command  message  took 
approximately  0.6  second  to  transmit.  The  longest  message  (KM)  commands)  took 
about  7  seconds.  The  transmission  of  each  message  required  only  "1”  and  “0” 
bit  modulation  (  no  "set”  bits)  on  the  uplink  carrier. 

An  important  aspect  of  each  command  message  was  the  inclusion  of  a  32-bit 
authentication  word.  The  sensor  module  would  accept  the  message  and  initiate  com¬ 
mand  execution  only  if  the  transmitted  authentication  word  matched  the  authenti¬ 
cation  word  maintained  in  the  sensor  module  command  system.  When  the  sensor 
module  accepted  the  transmitted  authentication  word,  it  processed  the  command 
message  and  updated  its  internal  authentication  word.  The  value  of  the  updated 
authentication  word  was  based  on  the  previous  authentication  word  value.  The  next 
command  message  sent,  in  order  to  be  received  and  processed,  had  to  include  the 
updated  authentication  word. 


I 


1  to  100  commands 


Preamble 

Authentication 

word 

32  bits 

Delay 

Sync 

Command 

Command 

HI 

Command 

Postamble 

256  bits 

160  bits 

8  bits 

$4  bits 

64  bits 

H 

64  bits 

1 6  bits 

Fig.  C-1  Uplink  command  message  format. 
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APPKNDIX  I)— 

FORMAT  OF  C  OMMAND  CKNTKR  OITPl'T  TO  THK  AFSC’N 


Command  messages  generated  by  (he  sensor  module  command  eemer  were  sent 
to  the  orbiting  sensor  module  via  the  AFSCN.  I  his  required  that  command  mes¬ 
sages  sent  from  the  command  center  be  packed  in  the  AFSCN  48  bit  frame  format 
as  defined  in  Fig.  D-l.  In  the  command  center,  a  component  called  the  AI  SC'N 
formatter  packed  the  command  message  into  the  AFSCN  format  for  transmission 
through  the  AFSCN.  At  the  remote  uplink  site,  the  inverse  formatting  process  was 
performed,  i.e.,  the  command  bits  were  “unpacked"  from  the  48  bit  frames  to 
modulate  the  uplink  carrier  at  I  kb's. 

As  shown  in  Fig.  D-l,  each  20  bit  segment  of  the  command  message  (command 
bits)  were  converted  to  a  48  bit  AFSCN  frame  consisting  of  7  sync  bits,  a  40  bit 
data  field,  and  a  parity  bit.  The  40  bit  data  field  resulted  from  a  di-bit  conversion 
of  the  20  command  bits.  The  conversion  process  was  in  real-time  and  continuous 
and  the  AFSCN  formatter  output  data  rate  was  exactly  48  20  times  the  1  kb/s 
command  bit  rate. 

The  command  center  AFSCN  formatter,  between  uplink  messages,  provided  an 
output  of  idle  null  messages  (Fig.  D-2).  For  the  idle  null  message,  the  data  field 

!-< - AFSCN  48  bit  data  frame - 


40  bits  data  _  |  1  bit 

(20  command  bits)  [  Par,ty 


1  command  bit  =  2  trame  bits 


Sync  word 

Command  data  bits 

Frame  bits 

Parity 

1110010 

1 

10 

Indicates  bn  parity 

0 

01 

within  command  bit 

null 

00 

segment  ot  frame 

set 

11 

Even  parity. 

Command  data  bits 

20 

1  kb/s 

Frequency  accurate 

native 

Frame  bits 

48 

2.4  kb/s 

to  /0  021% 

7  bit 
sync  | 
word  I 


Fig.  D-1  AFSCN  48  bit  frame  format. 


Command 

center 

output 

- Idle  null  message 


Command  uplink  message  encrypted 
T.  "0‘  command  bits  at  1  kb's 


Uplink  message  packed  into 
48  bit  AFSCN  data  frames 


Idle  null  message- 


£ _ _ _ : _ 

rr 

_ _ _ 

lJ 

i  1  H  1 

/ 

/  7 

48  bit  AFSCN  trame 
2.4  kb  s 


Fig.  D-2  Command  center  output  to  the  AFSCN. 
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of  the  48  bit  field  consisted  of  di-bit-converted  “null”  bits.  Transitions  between 
the  idle  null  message  and  the  encrypted  uplink  message  was  accomplished  such  that 
clock  and  frame  synchronization  was  maintained.  This  allowed  AFSCN  equipment 
to  maintain  continouous  synchronization  and  error  check  of  the  command  center 
output  throughout  each  pass,  irrespective  of  the  data  content  of  the  48  bit  frames. 

AFSCN  equipment  was  configured  such  that  command  operation  was  automatic; 
i.e.,  no  AFSCN  operator  interaction  was  required  to  send  individual  command  mes¬ 
sages.  The  idle  null  messages  resulted  in  no  uplink  modulation  of  the  RF  carrier 
(the  RF  carrier  was  on  continuously  throughout  each  pass).  Uplink  messages  were 
automatically  detected  by  AFSCN  equipment  and  resulted  in  command  message 
modulation  of  the  carrier. 
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